SRP_create_verifier does not check for NULL before OPENSSL_cleanse